Search for a command to run...
An SSH authentication succeeds at 00:01:30. A process record appears at 00:01:45. Sorting those timestamps puts the process second. It does not tell us how accurately either collector measured time, o
An alert is useful when it shows the source, the account, the number of observations and the time window. EXCUBITOR 0.1.0, now available as a first public pre-release, puts that evidence in a terminal
Quaere. Examina. Proba. Six bytes were enough to make this boundary visible. A synthetic evidence file containing before passed import into Relatio Workbench. Changing its content to after! caused rej
I publish as Artifex Ignotvs. The seal carries a question mark. Before I trust a security claim, I want to know what was examined, how it was tested, and where the result stops being reliable. That is
